Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91843d97-6369-3bdf-9c6a-602add1aefbd.roa
File: 91843d97-6369-3bdf-9c6a-602add1aefbd.roa (raw, json)
Hash identifier: PEQozyjsSBu0pGIwDpaYT7qhifbBXrccTlFeH9cD0vI=
Subject key identifier: 29:58:61:5E:82:37:1A:7C:5A:FC:C1:E4:54:0C:26:F9:AA:7E:49:AB
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848302D2977A8E0FECAA284E0B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91843d97-6369-3bdf-9c6a-602add1aefbd.roa
Signing time: Fri 13 Dec 2024 02:16:41 +0000
ROA not before: Fri 13 Dec 2024 02:16:41 +0000
ROA not after: Thu 13 Mar 2025 01:16:41 +0000
asID: 13335
IP address blocks: 172.70.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:2d:29:77:a8:e0:fe:ca:a2:84:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 02:16:41 2024 GMT
Not After : Mar 13 01:16:41 2025 GMT
Subject: CN=2fb0a178-7196-49ab-b145-c5e064c0bd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:93:67:1b:83:92:80:84:2e:14:a4:52:d5:
f7:e6:e1:fd:64:e2:dd:af:0b:b5:e3:51:8c:a2:57:
21:17:ba:20:e3:19:8e:0c:54:36:73:b4:65:7d:f8:
3e:79:f3:32:cc:75:c8:20:7f:49:14:d9:51:58:09:
7f:33:58:64:2c:03:e4:b8:a9:7d:f9:12:3e:fe:be:
b0:5b:6f:28:ae:20:cd:f0:c1:65:7f:f1:df:72:e8:
a4:12:cb:ed:eb:7d:19:b9:70:fc:5e:26:36:48:8b:
ed:7c:69:80:2c:ff:70:84:7d:c4:6f:c7:8f:23:58:
09:7a:7d:da:61:76:f7:41:55:3b:9e:ba:bf:a8:57:
19:b6:63:1b:c9:ae:1f:22:b1:7b:6c:48:21:fd:7d:
0c:5f:4d:5f:24:69:1d:41:34:80:f4:b7:c1:6c:25:
25:72:80:b9:ed:41:5d:43:bc:08:d2:9e:0a:72:77:
10:e1:44:d2:5f:90:01:3b:c2:3d:80:d6:99:eb:ce:
95:46:e6:13:fc:47:f0:04:a1:fd:a3:1e:e0:9d:6e:
74:20:2c:2f:cb:7c:91:22:d7:ec:b4:3b:4c:cc:93:
d6:2f:2b:8b:71:5b:22:c8:aa:c5:65:e2:f3:d1:0a:
8a:09:9b:69:82:d2:6d:8a:9c:24:a5:c8:83:2d:ce:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:58:61:5E:82:37:1A:7C:5A:FC:C1:E4:54:0C:26:F9:AA:7E:49:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91843d97-6369-3bdf-9c6a-602add1aefbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:83:e2:0b:bf:43:fa:67:bb:52:74:78:82:b9:83:50:2e:17:
9a:93:b4:a7:19:5e:e8:56:ec:7f:df:30:8e:72:32:d6:d6:51:
52:4c:dd:6a:d4:a9:3d:5e:9e:cd:0f:47:ea:05:21:7a:51:ea:
fb:5d:a5:a9:0a:1d:68:a2:2d:de:0a:f7:59:ed:d3:79:fb:8a:
9e:fa:c6:da:e4:9e:e9:1c:31:c0:24:85:1e:1a:54:6f:8e:3b:
f6:3b:36:81:3a:4c:b2:ff:b7:f9:69:59:b9:73:d4:c9:04:02:
3c:8a:d2:5c:c8:81:8b:fa:a5:a2:b4:79:cf:9b:ec:2b:77:f4:
94:cc:03:5a:9e:1d:9b:6f:b5:24:8b:92:ab:7f:fa:69:67:5f:
b6:90:81:7e:1e:6f:34:16:d9:a3:b2:8a:e4:f2:d3:d4:ed:d8:
7d:5b:ae:b4:14:e4:a2:c1:af:d6:6b:66:18:4c:10:3a:1d:8d:
48:35:54:ee:b6:e1:f7:b1:c5:88:d0:b6:9f:6e:36:fe:e7:44:
69:24:55:c3:20:d4:dd:c8:61:17:f9:4b:74:00:cc:fb:97:80:
50:d1:e2:d9:39:f4:fd:a3:df:95:96:36:7a:a3:cb:8d:c9:97:
bb:af:15:b3:d4:5c:7d:c1:51:5b:b5:07:b0:1c:83:42:79:7f:
f8:73:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:06 2025 by rpki-client